IBM C2150-609 問題集

質問 1：
What method can be used to upload firmware to an IBM Security Access Manager V9.0 virtual appliance? .
A. USB
B. VMware tools
C. FTP
D. SCP
正解：A

質問 2：
Multiple hostnames are mapped to a single IP address used by a WebSEAL instance, listening on the default HTTPS port. For each host name requested in the browser, WebSEAL needs to present a different certificate.
What can the deployment professional do to meet this requirement?
A. Enter multiple values for the "webseal-cert-keyfile-label" parameter in the [ssl] stanza of the WebSEAL configuration
B. Configure WebSEAL to use Server Name Indication
C. Configure an additional interface in the WebSEAL configuration file, and add a
"certificate-label" for each hostname
D. Configure separate WebSEAL instances for each hostname
正解：B

質問 3：
The 10.51.140.x/24 IP Address space has been allocated for a new IBM Security Access Manager V9.0 deployment with the option of creating subnets.
What are the two correct network configurations for Management and Application interfaces (Choose two.)
A. Interface 1.1 ==> 10.51.140.51/255.255.255.0 [Management]
Interface 1.2 ==> 10.51.141.52/255.255.255.0 [Application]
B. Interface 1.1 ==> 10.51.140.51/255.255.255.0 [Management]
Interface 1.1 ==> 10.51.140.52/255 255 255.0 [Application]
C. Interface 1.1 ==> 10.51.140.51/255.255.255.0 [Management]
Interface 1.1 ==> 10.51.141.52/255.255.255.0 [Application]
D. Interface 1.1 ==> 10.51.140.51/255.255.255.0 [Management]
Interface 1.2 ==> 10.51.140.52/255 255.255.0 [Application]
E. Interface 1.1 ==> 10.51.140.51/255.255.255.192 [Management]
Interface 1.3 ==> 10.51.140.52/255.255.255.192 [Application]
正解：A,E

質問 4：
A company has deployed an IBM Security Access Manager V9.0 solution with two Web reverse proxies and a load balancer in front them. The Web reverse proxy servers are configured with Distributed Session Cache (DSC).
Which two statements describe this deployment with respect to DSC? (Choose two.)
A. It provides controls over the maximum number of allowed concurrent sessions per user.
B. It forces all reverse proxies to perform authorization checks on the same protected object space, which reduces the number of places where ACLs and POPs need to be specified.
C. It enables a standby Policy Server to be promoted to master if the primary Policy Server fails.
D. It stores the last login timestamp.
E. It means that a user who has logged in to reverse proxy is not required to log in again if it fails and a load balancer routes the user's traffic to another reverse proxy.
正解：A,E

質問 5：

Considering the rule precedence, which policy decision is returned for a user with a risk score of 40 and an ipAddress not considered malware?
A. Deny after Authentication One-Time-Password
B. Permit
C. Permit with Authentication One-Time-Password
D. Deny
正解：D

質問 6：
Which hardware component is included in an IBM Security Access Manager V9.0 hardware appliance?
A. IPMI port
B. InfiniBand port
C. LCD Panel
D. UPS
正解：C

質問 7：
To configure IBM Security Access Manager V9.0 for Windows desktop single sign-on using Kerberos authentication, the Reverse Proxy's identity in the Active Directory Kerberos Domain must be associated with a Service Principal name (SPN).
Given the following information:
AD Kerberos Realm Name: company.com
ISAM Reverse Proxy DNS Domain: ws1xompany.com
What is the correct SPN?
A. HTTP/[email protected]
B. HTTP/wsl.company.com
C. HTTP/ws1 [email protected]
D. HTTP/[email protected]
正解：C

質問 8：
Which two features does the hardware appliance provide by default? (Choose two.)
A. 6 network interfaces
B. Built-in UPS
C. On-board Hardware Cryptographic Accelerator
D. Dedicated CPU. disk and memory resources for IBM Security Access Manager
E. DVD drive
正解：A,D